Source: IAPP

The article outlines the European Data Protection Board’s (EDPB) latest opinion on lawful data usage for AI training under the General Data Protection Regulation (GDPR). The EDPB emphasizes that data used in AI training must comply with GDPR principles such as legality, transparency, and data minimization.

A key focus is the role of Data Protection Authorities (DPAs) in overseeing compliance. The EDPB advocates for discretion by DPAs, allowing tailored approaches based on the context of AI applications and the sensitivity of the data involved. This flexibility aims to strike a balance between innovation and adherence to strict privacy standards.

The opinion also addresses concerns over scraped data, often used in AI model training, highlighting the need for explicit consent or alternative lawful bases for processing. It urges developers to adopt privacy-by-design principles and conduct regular impact assessments to ensure compliance.

The article concludes by stressing the importance of collaboration between regulators, developers, and organizations to foster trust in AI systems while maintaining robust data protection frameworks in Europe.